Independent AI index
for professionals

Home / Safety / Microsoft Dragon Copilot for GP practices

Microsoft (Nuance)

How safe is Microsoft Dragon Copilot for GP practices?

GDPR profileOur summary of what the provider itself publishes about your data: whether the data is stored in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is established in the Netherlands or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure for GP practicesUnknown

The maker of Microsoft Dragon Copilot publishes little about data protection. Ask before you put confidential GP practice data into it.

Where does Microsoft Dragon Copilot stand in GP practices?

Shared place 18 of 26 options for GP practices (professional tools and general assistants) on GDPR profile. 2 options, like Microsoft Dragon Copilot, have an unknown profile. Each tile is an option we track for this field; click to check.

Strong9
Good6
Limited2
Unknown2
Caution7

Published safeguards

None of these three found in what the provider publishes; you can read what is there below. Is this your tool? Add the details

LLMs and generative AI from Microsoft for Healthcare, specific model not named (Azure OpenAI Service for content filters); EU Data Boundary Service: data from Dutch customers stored in Germany; customer data is anonymised within 90 days and models are trained on anonymised data; arrangements in the Microsoft DPA (according to the provider)

How to use Microsoft Dragon Copilot safely

  • Use the business variant and sign a data processing agreement (DPA).
  • Do not enter unnecessary personal data into prompts; anonymise where possible.
  • Ask the provider explicitly where data is stored and processed.
  • Keep a professional in the loop: patient data is special category personal data (GDPR, WGBO).

Stronger or even strong in GP practices

Juvoly (Tandem Health)Juvoly B.V. / Tandem Health (Leiden)Huisartsen AIHuisartsen AI (Rotterdam)Medicom (PharmaPartners)PharmaPartners B.V. (Oosterhout, NL)MedendoMedendo B.V. (Utrecht, NL)NotelessNoteless AS (Oslo, NO)

Questions

How safe is Microsoft Dragon Copilot for GP practices?
The maker of Microsoft Dragon Copilot publishes little about data protection. Ask before you put confidential GP practice data into it. The provider publishes little on this, ask before business use.
Does Microsoft Dragon Copilot train on my data?
LLMs and generative AI from Microsoft for Healthcare, specific model not named (Azure OpenAI Service for content filters); EU Data Boundary Service: data from Dutch customers stored in Germany; customer data is anonymised within 90 days and models are trained on anonymised data; arrangements in the Microsoft DPA (according to the provider)
What should I look out for with AI in GP practices?
Patient data is special category personal data (GDPR, WGBO). Only use systems with NEN 7510 certification, a data processing agreement and EU hosting; audio recordings of consultations must not be stored unencrypted with external servers. AI-supported triage and diagnostics are supportive, the GP remains ultimately responsible and must verify all AI output. Systems classed as high risk under the EU AI Act (diagnostic decisions) require an audit trail and explainability.

Source documents

learn.microsoft.comlearn.microsoft.comwww.microsoft.comwww.chipsoft.com

Everything about Microsoft Dragon Copilot Best AI for GP practices

Summarised by the editorial team from provider documentation · not legal advice

Last checked: 29 October 2026 · How we check

Next stepAll 26 options for GP practicesProfessional tools and general assistants side by side, on GDPR profile, price and quality.

Every Friday: what changed in AI for GP practices

New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.

View a sample

We only use your address for this newsletter. You confirm first by email.